Merge pull request #5 from The-3Labs-Team/protect-API-with-middleware

Protect API routes with nova:api middleware
The-3Labs-Team · Jan 29, 2024 · 8226e44 · 8226e44
2 parents a27f4a1 + b0b277a
commit 8226e44
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 8 deletions.
diff --git a/dist/js/field.js b/dist/js/field.js
diff --git a/resources/js/components/FormField.vue b/resources/js/components/FormField.vue
@@ -44,7 +44,7 @@ export default {
         async checkIfIsNotBusy() {
 
             try {
-                const response = await fetch('/api/busy-is-busy', {
+                const response = await fetch('/nova-vendor/the-3labs-team/nova-busy-resource-field/is-busy', {
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/json',
@@ -77,7 +77,7 @@ export default {
 
         async storeAccess() {
 
-            const response = await fetch('/api/busy-store-busy', {
+            const response = await fetch('/nova-vendor/the-3labs-team/nova-busy-resource-field/store-busy', {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',

diff --git a/resources/js/components/IndexField.vue b/resources/js/components/IndexField.vue
@@ -47,7 +47,7 @@ export default {
     methods: {
         async fetchData() {
             try {
-                const response = await fetch('/api/busy-is-busy', {
+                const response = await fetch('/nova-vendor/the-3labs-team/nova-busy-resource-field/is-busy', {
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/json',

diff --git a/routes/api.php b/routes/api.php
@@ -1,6 +1,7 @@
 <?php
 
 use Illuminate\Support\Facades\Route;
+use The3labsTeam\NovaBusyResourceField\App\Http\Controllers\BusyController;
 
 /*
 |--------------------------------------------------------------------------
@@ -13,6 +14,5 @@
 |
 */
 
-Route::post('/api/busy-is-busy', [\The3labsTeam\NovaBusyResourceField\App\Http\Controllers\BusyController::class, 'isBusy']);
-Route::post('/api/busy-store-busy', [\The3labsTeam\NovaBusyResourceField\App\Http\Controllers\BusyController::class, 'storeBusy']);
-Route::post('/api/busy-update-busy-date', [\The3labsTeam\NovaBusyResourceField\App\Http\Controllers\BusyController::class, 'updateBusyDate']);
+Route::post('/is-busy', [BusyController::class, 'isBusy']);
+Route::post('/store-busy', [BusyController::class, 'storeBusy']);
diff --git a/src/FieldServiceProvider.php b/src/FieldServiceProvider.php
@@ -51,7 +51,8 @@ protected function routes()
             return;
         }
 
-        Route::middleware(['nova'])
+        Route::middleware(['nova:api'])
+            ->prefix('nova-vendor/the-3labs-team/nova-busy-resource-field')
             ->group(__DIR__.'/../routes/api.php');
     }